Support for client certs in ssl_server_socket.

net/socket/nss_ssl_util.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file is only included in ssl_client_socket_nss.cc and
 // ssl_server_socket_nss.cc to share common functions of NSS.
 
 #ifndef NET_SOCKET_NSS_SSL_UTIL_H_
 #define NET_SOCKET_NSS_SSL_UTIL_H_
 
 #include <prerror.h>
 #include <prio.h>
 
 #include "net/base/net_export.h"
 #include "net/base/net_log.h"
 
 namespace net {
 
 class BoundNetLog;
+struct SSLConfig;
 
 // Initalize NSS SSL library.
 NET_EXPORT void EnsureNSSSSLInit();
 
 // Log a failed NSS funcion call.
 void LogFailedNSSFunction(const BoundNetLog& net_log,
                           const char* function,
                           const char* param);
 
 // Map network error code to NSS error code.
 PRErrorCode MapErrorToNSS(int result);
 
 // GetNSSModelSocket returns either NULL, or an NSS socket that can be passed
 // to |SSL_ImportFD| in order to inherit some default options.
 PRFileDesc* GetNSSModelSocket();
 
 // Map NSS error code to network error code.
 int MapNSSError(PRErrorCode err);
 
 // Creates a NetLog callback for an SSL error.
 NetLog::ParametersCallback CreateNetLogSSLErrorCallback(int net_error,
                                                         int ssl_lib_error);
 
+// Extracts various aspects of the connection status from the socket denoted
+// by |nss_fd| and the |ssl_config| and updates the value at
+// |ssl_connection_status| accordingly.
+void UpdateSSLConnectionStatus(PRFileDesc* nss_fd,

[Ryan Sleevi, 2015/03/19 04:38:24]

I'm generally uneasy with moving this into a common header; there are //net
exported bits here.

+                               const SSLConfig& ssl_config,
+                               int* ssl_connection_status);
 
 }  // namespace net
 
 #endif  // NET_SOCKET_NSS_SSL_UTIL_H_